CVE-2026-63248

Vendor

GitHub, Oracle

Product

Industrial connectivity / IIoT

CVSS

3.1

Exposure class

OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 21
   CISA advisory CISA 16d ago

   Eclipse Foundation Eclipse Milo

   Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following…

   CVSS 3.1 Fix available CVE-2026-62927CVE-2026-63252CVE-2026-58080+3 more GitHub Oracle
2. 5
   CVE NVD 4 Aug 2026

   In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization.

   In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpoint without a certificate; with a trusted client…

   CVE-2026-63248